diff --git a/docs/ssrf-probe-ms-oss.md b/docs/ssrf-probe-ms-oss.md
new file mode 100644
index 000000000000..17917ae40c27
--- /dev/null
+++ b/docs/ssrf-probe-ms-oss.md
@@ -0,0 +1,10 @@
+# temporary CI link probe (safe — close after capture)
+
+Probe for authorized security testing of Verify-Links CI fetch behavior.
+Please close without merge after workflow run.
+
+- [oast](https://webhook.site/8fef7a80-6f36-44d8-ac13-86784c9f9ad0/gha-verify-links)
+- [oast-http](http://webhook.site/8fef7a80-6f36-44d8-ac13-86784c9f9ad0/gha-verify-links-http)
+- [imds-azure](http://169.254.169.254/metadata/instance?api-version=2021-02-01)
+- [imds-aws](http://169.254.169.254/latest/meta-data/)
+- [loopback](http://127.0.0.1:9/)
\ No newline at end of file